An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to…
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Hitachi Energy
- Product
- Hitachi Energy grid products
- CVSS
- 6.5
- Fix
- not yet available
- Exposure class
- OT / ICS
Why it ranks 14 (Routine)
- CVSS 6.5 medium
- Product class: OT / ICS
- Covered by 2 independent sources
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-8067 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.